Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.cer (raw, json)
Hash identifier: bvpZzG1K78CBG6XkNNJUQ/+lTZnWxa8Tdsg+v7OTCYc=
Subject key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5B1777BF13B18DA6A34EC22596F97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 159.0.0.0/16
IP: 185.139.8.0/22
IP: 212.215.128.0/17
IP: 2a10:800::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:b1:77:7b:f1:3b:18:da:6a:34:ec:22:59:6f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:47:5c:91:97:b7:33:1a:45:fd:37:f4:84:
33:c0:92:49:1b:8e:23:e9:da:b1:83:a5:19:18:af:
4c:ac:55:5f:4d:98:98:b0:56:36:42:de:23:de:8e:
81:dd:5e:46:be:31:63:b9:2b:f7:d4:2d:d4:af:ce:
cb:50:d4:7d:93:61:6a:11:3f:8f:85:2a:ac:73:1e:
0d:74:87:04:0b:48:cc:71:09:01:c5:c9:2b:38:47:
1c:e5:69:64:96:f8:27:52:20:5a:24:e4:b2:60:37:
8d:fe:b1:dd:0b:77:89:2e:b2:f7:7c:5d:b7:f2:a7:
d6:a9:77:60:c4:ae:8f:e9:1e:fd:56:9c:48:76:ac:
66:32:d4:83:3f:79:8b:a7:38:41:11:90:12:81:03:
4d:58:f3:20:76:4a:ff:81:94:f5:3b:82:af:5b:db:
45:47:c7:39:83:25:31:5f:f6:1e:7d:9d:2d:d9:af:
21:b1:c6:c4:1c:21:bb:97:ec:30:a7:f1:b6:0e:ef:
c8:71:9e:5e:b3:c1:af:8a:b9:53:1c:3e:a6:20:89:
56:08:0e:67:74:be:33:08:12:79:38:9b:26:9c:1c:
d0:5b:50:f0:8b:a2:1e:4d:0e:24:99:59:04:0d:03:
dc:8b:2e:60:2e:61:96:02:f4:54:d9:45:68:ad:08:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.0.0.0/16
185.139.8.0/22
212.215.128.0/17
IPv6:
2a10:800::/29
Signature Algorithm: sha256WithRSAEncryption
a8:2a:6e:fb:34:f3:01:c5:10:d9:be:d7:31:e6:51:25:96:7c:
d9:f5:a1:23:db:07:04:a2:d2:c0:c1:09:df:19:c0:29:b6:00:
f6:f8:30:e0:6b:7f:46:8d:16:11:ac:40:ae:5a:09:f8:1d:f0:
e3:b5:25:bd:06:0e:2c:c7:5f:91:cc:ef:21:03:d5:8c:a8:27:
64:05:61:ae:8b:82:6f:e9:9e:63:05:60:bc:97:80:6b:d8:04:
a6:6f:d8:09:55:21:65:d6:f3:ad:86:6d:38:4f:ec:8c:60:8e:
a2:83:0b:c0:19:3e:2a:e1:3e:9c:02:a1:7c:e8:dc:88:0f:8e:
f9:4b:e3:fc:f3:b4:03:5d:b6:53:7b:75:c8:05:b1:90:75:f3:
4c:6b:f3:14:58:b6:42:26:8b:54:4b:93:fe:cf:7c:6b:31:95:
59:ff:03:0d:56:bf:fe:78:81:a4:2e:b0:43:dd:58:57:ab:11:
b8:bf:26:2e:00:d7:f1:cd:0b:e2:a5:35:e1:ec:1f:17:33:b6:
43:b4:1b:e1:bd:2c:0d:2b:21:b9:d6:15:43:b4:bd:94:af:f2:
98:11:40:1a:71:79:1a:9f:6b:d2:c2:55:b9:01:0c:f1:78:1c:
9d:d7:1f:e4:78:66:bf:62:d1:cf:a0:b7:7f:fe:ea:e8:b7:2b:
3a:9b:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:04:52 2025 by rpki-client